lib/codetag Heap Buffer Overflow DoS

The vulnerability of the codetagunloadmodule function in the lib/codetag.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel trace unregister_fprobe Heap Buffer Overflow DoS

The vulnerability of the unregisterfprobe function in the kernel/trace/fprobe.c module, which supports kernel tracing in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

amdgpu_vram_mgr_new Heap Buffer Overflow DoS

The vulnerability of the amdgpuvrammgrnew function in the drivers/gpu/drm/amd/amdgpu/amdgpuvrammgr.c driver module related to AMD GPU cores in Linux operating systems is associated with synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to caus...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the makeuffdwppte function in the fs/proc/taskmmu.c module of the Linux kernel’s file system support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsexpand inodedata function in the fs/f2fs/file.c module of the F2FS file system in the Linux operating system is related to the handling of general resources without synchronization race condition. Exploiting this vulnerability could allow a attacker to cause service...

Linux kernel InfiniBand Heap Buffer Overflow DoS

The vulnerability of the mlx5rumrcleanup function in the drivers/infiniband/hw/mlx5/umr.c file of the Linux kernel’s InfiniBand support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Amazon Linux 2023 : aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0 (ALAS2023-2026-1506)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1506 advisory. Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network. CVE-2026-26127 Allocation of resources without limits or throttling in ASP.NET Core allows an...

Server-side Request Forgery (SSRF)

Overview nuxt-og-image is an Enlightened OG Image generation for Nuxt. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via user-controlled parameters in the /og/d/ endpoint. An attacker can access internal network resources or sensitive data by injecting craft...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +4 more potentially affected by CVE-2026-34203 via nautobot (>=2.0.0, <=2.4.20)

nautobot PYPI version =2.0.0, =2.0.0, =0.16.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2026-34203 Source advisory: GHSA-XMPV-J7P2-J873...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +4 more potentially affected by CVE-2026-34203 via nautobot (>=2.0.0, <=2.4.20)

nautobot PYPI version =2.0.0, =2.0.0, =0.16.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2026-34203 Source advisory: OSV:GHSA-XMPV-J7P2-J873...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +4 more potentially affected by CVE-2026-34203 via nautobot (>=2.0.0, <=2.4.20)

nautobot PYPI version =2.0.0, =2.0.0, =0.16.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2026-34203 Source advisory: SNYK:PYTHON-NAUTOBOT-15870965...

CVE-2026-34442

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.211, host header manipulation in FreeScout version http://localhost:8080/system/status allows an attacker to inject an arbitrary domain into generated absolute URLs. This leads to External...

CVE-2026-34366

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.2.0, a Server-Side Request Forgery SSRF vulnerability exists in the Payment receipt PDF generation module. User-supplied HTML in the payment Notes...

CVE-2026-34367

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.2.0, a Server-Side Request Forgery SSRF vulnerability exists in the Invoice PDF generation module. User-supplied HTML in the invoice Notes field i...

CVE-2026-34365

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.2.0, a Server-Side Request Forgery SSRF vulnerability exists in the Estimate PDF generation module. User-supplied HTML in the estimate Notes field...

nautobot-chatops (1.3.0), nautobot-device-resources (1.0.0) +4 more potentially affected by CVE-2026-34203 via nautobot (>=2.0.0, <=2.4.20)

nautobot PYPI version =2.0.0, =2.0.0, =0.16.0, =2.0.0, =2.5.0 - nautobot-ssot-unifi 1.0.2 Source cves: CVE-2026-34203 Source advisory: OSV:PYSEC-2026-2224...

CVE-2026-34367 InvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes Field

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.2.0, a Server-Side Request Forgery SSRF vulnerability exists in the Invoice PDF generation module. User-supplied HTML in the invoice Notes field i...

CVE-2026-34366 InvoiceShelf: SSRF in Payment Receipt PDF Rendering via Unsanitised HTML in Notes Field

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.2.0, a Server-Side Request Forgery SSRF vulnerability exists in the Payment receipt PDF generation module. User-supplied HTML in the payment Notes...

CVE-2026-34366

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.2.0, a Server-Side Request Forgery SSRF vulnerability exists in the Payment receipt PDF generation module. User-supplied HTML in the payment Notes...

CVE-2026-34365 InvoiceShelf: SSRF in Estimate PDF Rendering via Unsanitised HTML in Notes Field

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.2.0, a Server-Side Request Forgery SSRF vulnerability exists in the Estimate PDF generation module. User-supplied HTML in the estimate Notes field...